Senior Cybersecurity Analyst

We are seeking a Senior Cybersecurity Analyst for a full-time contract position based in Arlington, Virginia. In this role, you will provide technical leadership in designing, implementing, and maintaining security architecture and controls that protect information systems, operational technology, and cloud infrastructure across a complex multi-cloud and hybrid environment. You will collaborate with IT, engineering, operations, and third-party vendors to embed security into system design, deployment, and ongoing operations.

Responsibilities

• Design, implement, and maintain enterprise security architectures that protect IT and OT environments across on-premises and cloud platforms.
• Develop and maintain security reference architectures and secure design patterns to support repeatable and scalable implementation of cybersecurity controls.
• Conduct architecture and security design reviews for enterprise platforms, applications, and infrastructure in multi-cloud and hybrid environments.
• Ensure cybersecurity controls are integrated into system design, development, and deployment processes.
• Support the implementation and ongoing maturity of the organization's enterprise cybersecurity program.
• Lead threat modeling exercises and collaborate with technical teams to integrate security controls into system architecture and solution design.
• Conduct security risk assessments and ensure alignment with enterprise risk management strategies.
• Identify potential vulnerabilities and provide remediation strategies to reduce organizational risk exposure.
• Develop and maintain security standards, policies, and procedures aligned with regulatory frameworks and industry best practices.
• Ensure security assessments and architecture reviews are documented and executed consistently to deliver high-quality security outcomes.
• Design and implement security controls for cloud environments (Azure and AWS) including identity, network segmentation, encryption, monitoring, and compliance capabilities.
• Support secure deployment practices across DevOps pipelines through DevSecOps integration and automation.
• Research and implement innovative approaches for security automation and security-as-code capabilities.
• Ensure alignment with recognized cybersecurity frameworks including NIST 800-53, FISMA, FedRAMP, and ISO 27000 series.
• Support internal and external security audits, compliance reviews, and control validation activities.
• Maintain documentation of security architecture decisions, assessments, and compliance artifacts.
• Partner with IT, infrastructure, application development, and operational technology teams to embed security into technology initiatives.
• Work closely with vendors, cloud providers, and third-party partners to ensure secure system integrations.
• Provide technical guidance and security expertise during platform implementations and system upgrades.

Qualifications

• Required
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field, or equivalent professional experience.
• Minimum 10 years of experience in cybersecurity, information security engineering, or security architecture, preferably within the energy, utilities, or industrial sectors.
• At least 5 years of experience performing security risk assessments and implementing security frameworks such as NIST 800 series, ISO 27000 series, or IT General Controls.
• Experience designing and implementing security controls within cloud environments (Azure and AWS).
• Experience supporting multi-cloud or hybrid infrastructure environments.
• Experience implementing or supporting NIST 800-53, FISMA, or FedRAMP Moderate/High security controls.
• Strong knowledge of Identity and Access Management (IAM) and authentication protocols including SAML, OAuth, OIDC, and Multi-Factor Authentication.
• Experience with cryptography, key management, and secrets management platforms.
• Deep understanding of network security, data protection, encryption technologies, and secure access controls.
• Familiarity with DevSecOps principles and security automation frameworks.
• Experience securing enterprise applications, cloud services, and infrastructure platforms.